[Git][security-tracker-team/security-tracker][master] Add CVE-2018-2054{1,2}/libxsmm

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
57e7de5a by Salvatore Bonaccorso at 2018-12-28T08:58:37Z
Add CVE-2018-2054{1,2}/libxsmm

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19,9 +19,16 @@ CVE-2018-20544 (There is floating point exception at caca/dither.c (function ...
 CVE-2018-20543 (There is an attempted excessive memory allocation at ...)
 	TODO: check
 CVE-2018-20542 (There is a heap-based buffer-overflow at generator_spgemm_csc_reader.c ...)
-	TODO: check
+	- libxsmm <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1652633
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1652635
+	NOTE: https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d
+	NOTE: https://github.com/hfp/libxsmm/issues/287
 CVE-2018-20541 (There is a heap-based buffer overflow in libxsmm_sparse_csc_reader at ...)
-	TODO: check
+	- libxsmm <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1652632
+	NOTE: https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d
+	NOTE: https://github.com/hfp/libxsmm/issues/287
 CVE-2018-20540 (There is memory leak at liblas::Open (liblas/liblas.hpp) in libLAS ...)
 	TODO: check
 CVE-2018-20539 (There is a Segmentation fault triggered by illegal address access at ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/57e7de5ad4845d5fd23d402f7a1a6b7ff841b4a0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/57e7de5ad4845d5fd23d402f7a1a6b7ff841b4a0
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181228/1d82cd85/attachment.html>